Vulnerability Bulletins

CVE-2026-66764

   
Affected software SAP
 
Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated users, allowing them to use rules that have not been shared with them, resulting in privilege escalation.This vulnerability has a low impact on confidentiality, with no impact on integrity and availability of the application

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-66764